diff --git a/en_US.ISO8859-1/htdocs/news/status/report-2015-01-2015-03.xml b/en_US.ISO8859-1/htdocs/news/status/report-2015-01-2015-03.xml index abee98050f..25310e46ce 100644 --- a/en_US.ISO8859-1/htdocs/news/status/report-2015-01-2015-03.xml +++ b/en_US.ISO8859-1/htdocs/news/status/report-2015-01-2015-03.xml @@ -2126,4 +2126,53 @@ WITHOUT_FORTH=y two were taken in for safe-keeping.

+ + + Secure Boot + + + + + Edward Tomasz + Napierała + + trasz@FreeBSD.org + + + + + + + + +

UEFI Secure Boot is a mechanism that requires boot + drivers and operating system loaders to be cryptographically + signed by an authorized key. It will refuse to execute any + software that is not correctly signed, and is intended to secure + boot drivers and operating system loaders from malicious + tampering or replacement.

+ +

The utility to add Authenticode signatures to EFI files, + uefisign(8), was committed to 11-CURRENT and will ship in + 10.2-RELEASE. Ports for other open source utilities were added + to the Ports Collection, as sysutils/pesign, + sysutils/sbsigntool, and sysutils/shim. There + is a prototype patch that makes boot1 use the Secure Boot shim, and + modifies the shim to provide the functionality necessary + for a successful bootstrap.

+ + + The &os; Foundation + + + +

Finalize the shim API extension and get it accepted + upstream.

+ + + +

Commit boot1 changes.

+ + +